@iletai/nzb 1.1.0 → 1.1.2

package/dist/api/server.js

@@ -28,7 +28,7 @@ const app = express();
 app.use(express.json());
 // Bearer token authentication middleware (skip /status health check)
 app.use((req, res, next) => {
-    if (!apiToken || req.path === "/status" || req.path === "/send-photo")
+    if (!apiToken || req.path === "/status")
         return next();
     const auth = req.headers.authorization;
     if (!auth || auth !== `Bearer ${apiToken}`) {

package/dist/config.js

@@ -11,8 +11,14 @@ const configSchema = z.object({
     API_PORT: z.string().optional(),
     COPILOT_MODEL: z.string().optional(),
     WORKER_TIMEOUT: z.string().optional(),
+    NODE_EXTRA_CA_CERTS: z.string().optional(),
 });
 const raw = configSchema.parse(process.env);
+// Apply NODE_EXTRA_CA_CERTS from .env if not already set via environment.
+// This allows corporate users to configure their CA bundle path in ~/.nzb/.env.
+if (raw.NODE_EXTRA_CA_CERTS && !process.env.NODE_EXTRA_CA_CERTS) {
+    process.env.NODE_EXTRA_CA_CERTS = raw.NODE_EXTRA_CA_CERTS;
+}
 const parsedUserId = raw.AUTHORIZED_USER_ID ? parseInt(raw.AUTHORIZED_USER_ID, 10) : undefined;
 const parsedPort = parseInt(raw.API_PORT || "7777", 10);
 if (parsedUserId !== undefined && (Number.isNaN(parsedUserId) || parsedUserId <= 0)) {

package/dist/copilot/orchestrator.js

@@ -7,8 +7,8 @@ import { loadMcpConfig } from "./mcp-config.js";
 import { getSkillDirectories } from "./skills.js";
 import { getOrchestratorSystemMessage } from "./system-message.js";
 import { createTools } from "./tools.js";
-const MAX_RETRIES = 3;
-const RECONNECT_DELAYS_MS = [1_000, 3_000, 10_000];
+const MAX_RETRIES = 2;
+const RECONNECT_DELAYS_MS = [1_000, 5_000];
 const HEALTH_CHECK_INTERVAL_MS = 30_000;
 const ORCHESTRATOR_SESSION_KEY = "orchestrator_session_id";
 let logMessage = () => { };
@@ -242,7 +242,7 @@ async function executeOnSession(prompt, callback, onToolEvent) {
         callback(accumulated, false);
     });
     try {
-        const result = await session.sendAndWait({ prompt }, 300_000);
+        const result = await session.sendAndWait({ prompt }, 120_000);
         const finalContent = result?.data?.content || accumulated || "(No response)";
         return finalContent;
     }

package/dist/daemon.js

@@ -1,4 +1,5 @@
 import { spawn } from "child_process";
+import { existsSync } from "fs";
 import { broadcastToSSE, startApiServer } from "./api/server.js";
 import { config } from "./config.js";
 import { getClient, stopClient } from "./copilot/client.js";
@@ -6,6 +7,21 @@ import { getWorkers, initOrchestrator, setMessageLogger, setProactiveNotify } fr
 import { closeDb, getDb } from "./store/db.js";
 import { createBot, sendProactiveMessage, startBot, stopBot } from "./telegram/bot.js";
 import { checkForUpdate } from "./update.js";
+// Auto-detect system CA bundle for corporate environments with TLS inspection.
+// NODE_EXTRA_CA_CERTS must be set before any TLS connection is made.
+// Users can override via NODE_EXTRA_CA_CERTS env var or NODE_EXTRA_CA_CERTS in ~/.nzb/.env.
+if (!process.env.NODE_EXTRA_CA_CERTS) {
+    const knownCaBundles = [
+        "/etc/ssl/certs/ca-certificates.crt", // Debian/Ubuntu
+        "/etc/pki/tls/certs/ca-bundle.crt", // RHEL/CentOS/Fedora
+        "/etc/ssl/cert.pem", // macOS / Alpine
+    ];
+    const found = knownCaBundles.find((p) => existsSync(p));
+    if (found) {
+        process.env.NODE_EXTRA_CA_CERTS = found;
+        console.log(`[nzb] Auto-detected system CA bundle: ${found}`);
+    }
+}
 function truncate(text, max = 200) {
     const oneLine = text.replace(/\n/g, " ").trim();
     return oneLine.length > max ? oneLine.slice(0, max) + "…" : oneLine;
@@ -60,11 +76,15 @@ async function main() {
         console.log("[nzb] Telegram user ID missing — skipping bot. Run 'nzb setup' and enter your Telegram user ID (get it from @userinfobot).");
     }
     console.log("[nzb] NZB is fully operational.");
-    // Non-blocking update check
+    // Non-blocking update check — notify via console + all active channels
     checkForUpdate()
         .then(({ updateAvailable, current, latest }) => {
         if (updateAvailable) {
-            console.log(`[nzb] ⬆ Update available: v${current} → v${latest}  —  run 'nzb update' to install`);
+            const msg = `⬆ Update available: v${current} → v${latest} — run \`nzb update\` to install`;
+            console.log(`[nzb] ${msg}`);
+            if (config.telegramEnabled)
+                sendProactiveMessage(msg).catch(() => { });
+            broadcastToSSE(msg);
         }
     })
         .catch(() => { }); // silent — network may be unavailable

package/dist/telegram/bot.js

@@ -1,4 +1,5 @@
 import { Bot } from "grammy";
+import { Agent as HttpsAgent } from "https";
 import { config, persistModel } from "../config.js";
 import { cancelCurrentMessage, getQueueSize, getWorkers, sendToOrchestrator } from "../copilot/orchestrator.js";
 import { listSkills } from "../copilot/skills.js";
@@ -7,6 +8,10 @@ import { searchMemories } from "../store/db.js";
 import { chunkMessage, toTelegramMarkdown } from "./formatter.js";
 let bot;
 const startedAt = Date.now();
+// Direct-connection HTTPS agent for Telegram API requests.
+// This bypasses corporate proxy (HTTP_PROXY/HTTPS_PROXY env vars) without
+// modifying process.env, so other services (Copilot SDK, MCP, npm) are unaffected.
+const telegramAgent = new HttpsAgent({ keepAlive: true });
 export function createBot() {
     if (!config.telegramBotToken) {
         throw new Error("Telegram bot token is missing. Run 'nzb setup' and enter the bot token from @BotFather.");
@@ -14,11 +19,20 @@ export function createBot() {
     if (config.authorizedUserId === undefined) {
         throw new Error("Telegram user ID is missing. Run 'nzb setup' and enter your Telegram user ID (get it from @userinfobot).");
     }
-    bot = new Bot(config.telegramBotToken);
+    bot = new Bot(config.telegramBotToken, {
+        client: {
+            baseFetchConfig: {
+                agent: telegramAgent,
+                compress: true,
+            },
+        },
+    });
+    console.log("[nzb] Telegram bot using direct HTTPS agent (proxy bypass)");
     // Auth middleware — only allow the authorized user
     bot.use(async (ctx, next) => {
         if (config.authorizedUserId !== undefined && ctx.from?.id !== config.authorizedUserId) {
-            return; // Silently ignore unauthorized users
+            console.log(`[nzb] Telegram auth rejected: user ${ctx.from?.id} (authorized: ${config.authorizedUserId})`);
+            return;
         }
         await next();
     });
@@ -171,7 +185,8 @@ export function createBot() {
         const enqueueEdit = (text) => {
             if (finalized || text === lastEditedText)
                 return;
-            editChain = editChain.then(async () => {
+            editChain = editChain
+                .then(async () => {
                 if (finalized || text === lastEditedText)
                     return;
                 if (!placeholderMsgId) {
@@ -199,7 +214,8 @@ export function createBot() {
                     }
                 }
                 lastEditedText = text;
-            }).catch(() => { });
+            })
+                .catch(() => { });
         };
         const onToolEvent = (event) => {
             if (event.type === "tool_start") {
@@ -231,7 +247,9 @@ export function createBot() {
                                 await bot.api.editMessageText(chatId, placeholderMsgId, fallbackChunks[0]);
                                 return;
                             }
-                            catch { /* fall through to send new messages */ }
+                            catch {
+                                /* fall through to send new messages */
+                            }
                         }
                     }
                     // Multi-chunk or no placeholder: delete placeholder and send chunks
@@ -239,7 +257,9 @@ export function createBot() {
                         try {
                             await bot.api.deleteMessage(chatId, placeholderMsgId);
                         }
-                        catch { /* ignore */ }
+                        catch {
+                            /* ignore */
+                        }
                     }
                     const sendChunk = async (chunk, fallback, isFirst) => {
                         const opts = isFirst
@@ -260,7 +280,9 @@ export function createBot() {
                                 await ctx.reply(fallbackChunks[i], i === 0 ? { reply_parameters: replyParams } : {});
                             }
                         }
-                        catch { /* nothing more we can do */ }
+                        catch {
+                            /* nothing more we can do */
+                        }
                     }
                 });
             }

package/dist/update.js

@@ -1,17 +1,21 @@
+import { exec as execCb, execSync } from "child_process";
 import { readFileSync } from "fs";
-import { join, dirname } from "path";
+import { dirname, join } from "path";
 import { fileURLToPath } from "url";
-import { exec as execCb, execSync } from "child_process";
 const __dirname = dirname(fileURLToPath(import.meta.url));
-function getLocalVersion() {
+const PKG_NAME = "@iletai/nzb";
+function getPackageJson() {
     try {
         const pkg = JSON.parse(readFileSync(join(__dirname, "..", "package.json"), "utf-8"));
-        return pkg.version || "0.0.0";
+        return { name: pkg.name || PKG_NAME, version: pkg.version || "0.0.0" };
     }
     catch {
-        return "0.0.0";
+        return { name: PKG_NAME, version: "0.0.0" };
     }
 }
+function getLocalVersion() {
+    return getPackageJson().version;
+}
 /** Run a command asynchronously and return stdout. */
 function execAsync(cmd, timeoutMs) {
     return new Promise((resolve, reject) => {
@@ -25,7 +29,8 @@ function execAsync(cmd, timeoutMs) {
 /** Fetch the latest published version from npm. Returns null on failure. */
 export async function getLatestVersion() {
     try {
-        const result = await execAsync("npm view nzb version", 10_000);
+        const { name } = getPackageJson();
+        const result = await execAsync(`npm view ${name} version`, 10_000);
         return result || null;
     }
     catch {
@@ -54,10 +59,11 @@ export async function checkForUpdate() {
         checkSucceeded: latest !== null,
     };
 }
-/** Run `npm install -g nzb@latest` and return success/failure. */
+/** Run `npm install -g <pkg>@latest` and return success/failure. */
 export async function performUpdate() {
     try {
-        const output = execSync("npm install -g nzb@latest", {
+        const { name } = getPackageJson();
+        const output = execSync(`npm install -g ${name}@latest`, {
             encoding: "utf-8",
             timeout: 60_000,
             stdio: ["ignore", "pipe", "pipe"],

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@iletai/nzb",
-	"version": "1.1.0",
+	"version": "1.1.2",
 	"description": "NZB — a personal AI assistant for developers, built on the GitHub Copilot SDK",
 	"bin": {
 		"nzb": "dist/cli.js"